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CLAIMS 

Please amend the pending claims as follows. 

1 . (Currently Amended) A method operational in a mobile user device for authentication in 
a public cryptographic system comprising: 

creating a first private key and corresponding first public key; 

creating a second private key associated with the first private key and creating a second 
public key corresponding to the second private key; 

outputting the second private key once such that it can be re-created; 
outputting the second public key when outputting the first public key; and 
using the first private key for authentication. 

2. (Currently Amended) The method of claim 1, wherein outputting the second public key 
comprises: 

creating at least two shares of the second public private key; and 
outputting each share once to a different entity. 

3. (Currently Amended) The method of claim 1, further comprising: 
re-creating the second private key at the mobile user device ; and 

using the second private key for authentication of the mobile user device . 

4. (Currently Amended) The method of claim 3, further comprising: 

disabling the first private key when the second private key is used for authentication of 
the mobile user device . 

5. (Currently Amended) The method of claim 3, further comprising: 

creating a third private key associated with the second private key and creating a third 
public key corresponding to the third private key; and 

outputting the third public key from the mobile user device . 
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6. (Currently Amended) The method of claim 5, further comprising: 
outputting the third private key once such that it can be re-created; and 

re-creating the third private key at the mobile user device and using the third private key 
for authentication. 

7. (Currently Amended) The method of claim 5, further comprising: 

disabling use of the second private key for authentication of the mobile user device ; 
using the third private key for authentication; and 

re-creating the second third private key and using the second third private key for 
authentication. 

8. (Original) The method of claim 3, further comprising: 

creating a third private key associated with the second key and creating a third public key 
corresponding to the third private key; 

creating a fourth private key associated with the third private key and creating a fourth 
public key corresponding to the fourth private key; 

outputting the fourth private key once such that it can be re-created; and 

outputting the third and fourth public keys. 

9. (Original) The method of claim 8, further comprising: 
disabling use of the second private key for authentication; and 
using the third private key for authentication. 

10. (Original) The method of claim 9, further comprising: 
re-creating the fourth private key; and 

using the fourth private for authentication. 

11. (Currently Amended) A method for verification in a public cryptographic system 
comprising: 

receiving a first public key from a mobile user device ; 
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receiving a second public key associated with the first public ke y from the mobile user 

device ; 

using the first public key for authentication of the mobile user device ; and 
using the second public key for authentication of the mobile user device if the first public 
key fails. 

12. (Currently Amended) The method of claim 1 1, further comprising: 

receiving a third public key from the mobile user device, the third public key associated 
with the second public key, if the first public key fails and if the second public key results in a 
successful authentication. 

13. (Currently Amended) The method of claim 1 1 , further comprising: 

receiving a third public key and a fourth public key from the mobile user device , if the 
first public key fails and if the second public key results in a successful authentication, wherein 
the third and the fourth public keys are associated with the second key. 

14. (Currently Amended) Apparatus A mobile user device configured for authentication in a 
public cryptographic system comprising: 

means for creating a first private key and corresponding first public key; 
means for creating a second private key associated with the first private key and creating 
a second public key corresponding to the second private key; 

means for outputting the second private key once such that it can be re-created; 
means for outputting the second public key when outputting the first public key; and 
means for using the first private key for authentication. 

15. (Currently Amended) The apparatus device of claim 14, wherein means for outputting the 
second public key comprises: 

means for creating at least two shares of the second public private key; and 
means for outputting each share once to a different entity. 



Attorney Docket No.: 030010 
Customer No.: 23696 



6 



U.S. Ser. No. 10/752,420 



PATENT 



16. (Currently Amended) The apparatus device of claim 14, further comprising: 
means for re-creating the second private key; and 

means for using the second private key for authentication. 

17. (Currently Amended) The apparatus device of claim 16, further comprising: 

means for creating a third private key associated with the second private key and creating 
a third public key corresponding to the third private key; and 
means for outputting the third public key. 

18. (Currently Amended) The apparatus device of claim 1 6, further comprising: 

means for creating a third private key associated with the second key and creating a third 
public key corresponding to the third private key; 

means for creating a fourth private key associated with the third private key and creating 
a fourth public key corresponding to the fourth private key; 

means for outputting the fourth private key once such that it can be re-created; and 

means for outputting the third and fourth public keys. 

19. (Currently Amended) Apparatus An apparatus configured for verification in a public 
cryptographic system comprising: 

means for receiving a first public ke y from a mobile user device ; 

means for receiving a second public key from the mobile user device, the second public 

key associated with the first public key; 

means for using the first public key for authentication of the mobile user device ; and 
means for using the second public key for authentication of the mobile user device if the 

first public key fails. 

20. (Currently Amended) The apparatus of claim 19, further comprising: 

means for receiving a third public key associated with the second public key from the 
mobile user device , if the first public key fails and if the second public key results in a successful 
authentication of the mobile user device . 
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21. (Previously Presented) The apparatus of claim 19, further comprising: 

means for receiving a third public key and a fourth public key, if the first public key fails 
and if the second public key results in a successful authentication, wherein the third and fourth 
public keys are associated with the second public key. 

22. (Currently Amended) A machine-readable medium comprising instructions for 
performing a public cryptography, which when executed by a processor causes the processor to: 
An article of manufacture comprising a computer system having a public cryptographic system, 
said article of manufacture comprising a machine readable medium having machine readable 
code means embodied in said medium comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to create a first private key and corresponding first public key; 

machine readable code means embodied in said machine readable medium for causing 
th e comput e r to create a second private key associated with the first private key and creating a 
second public key corresponding to the second private key; 

machin e r e adabl e cod e means embodi e d in said machin e readable medium for causing 
the computer to output the second private key once such that it can be re-created; 

machine readable code means embodied in said machine readable medium for causing 
the computer to output the second public key when outputting the first public key; and 

machine readable code means embodied in said machine readable medium for causing 
the computer to use the first private key for authentication. 

23. (Currently Amended) The machine -readable medium of claim 22 The article of 
manufacture of claim 22 , wherein the machine readable code means to output outputting the 
second public private key comprises further comprises instructions to : 

machine readable code means embodied in said machine readable medium for causing 
the computer to create at least two shares of the second public private key; and 

machine readable code means embodied in said machine readable medium for causing 
the computer to output each share once to a different entity. 
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24. (Currently Amended) The machine-readable medium of claim 22 further comprising 
instructions to: The article of manufacture of claim 22, further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to recreate the second private key; and 

machine readable code means embodied in said machine readable medium for causing 
the computer to use the second private key for authentication. 

25. (Currently Amended) The machine-readable medium of claim 24 further comprising 
instructions to: The article of manufacture of claim 2 4 , further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to disable the first private key by using the second private key for authentication 

26. (Currently Amended) A machine-readable medium comprising instructions for 
performing a public cryptography, which when executed by a processor causes the processor to: 
An article of manufacture comprising a computer system having a public cryptographic system, 
said articl e of manufacture comprising a machine readable medium having machin e r e adabl e 
code means embodying in said medium comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer for causing the computer to receive a first public key; 

machine readable code means embodied in said machine readable medium for causing 
the computer for causing the computer to receive a second public key associated with the first 
public key; 

machine readable code means embodied in said machine readable medium for causing 
the computer to use the first public key for authentication; and 

machine readable code means embodied in said machine readable medium for causing 
the computer to use the second public key for authentication if the first public key fails. 
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27. (Currently Amended) The machine-readable medium of claim 26 further comprising 
instructions to: The article of manufacture of claim 26, further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to receive a third public key associated with the second public key, if the first 
public key fails and if the second public key results in a successful authentication. 

28. (Currently Amended) The machine-readable medium of claim 26 further comprising 
instructions to: The article of manufacture of claim 26, further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to receive a third public key and a fourth public key associated with the second 
public key, if the first public key fails and if the second public key results in a successful 
authentication. 

29. (Currently Amended) A method operational on a mobile user device for authentication in 
a public cryptographic system comprising: 

creating a private key, a public key corresponding to the private key, and an associated 
system parameter; 

outputting the system parameter when outputting the public key; and 
using the private key for authentication. 

30. (Original) The method of claim 29, further comprising: 

creating a new private key using a previous private key and the system parameter; and 
using the new private key for authentication. 

3 1 . (Original) The method of claim 29, further comprising: 

creating a counter value indicating the generation of public and private keys; and 
outputting the counter value when outputting the public key. 

32. (Original) The method of claim 3 1 , further comprising: 
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creating the new private key using a previous private key and the system parameter based 
on the counter value; and 

using the new private key for authentication. 

33. (Currently Amended) A method for verification in a public cryptographic system 
comprising: 

receiving a public key from a mobile user device ; 

receiving a system parameter from a mobile user device, the system parameter associated 
with the public key; 

authenticating the mobile user device using the public key; and 

generating a new public key and authenticating the mobile user device using the new 
public key, if a previous public key fails, the new public key being derived from the previous 
public key and the system parameter. 

34. (Original) The method of claim 33, wherein generating the new public key comprises: 
using a number of powers of the previous public key for authentication; and 
accepting one that works as the new public key. 

35. (Currently Amended) The method of claim 33, further comprising 

receiving a counter value from the mobile user device indicating the generation of private 
and public keys; and 

generating the new public key using the previous public key and the system parameter 
based on the counter value. 

36. (Currently Amended) Apparatus A mobile user device configured for authentication in a 
public cryptographic system comprising: 

means for creating a private key, a public key corresponding to the private key, and an 
associated system parameter; 

means for outputting the system parameter when outputting the public key; and 
means for using the private key for authentication of the mobile user device . 



Attorney Docket No.: 030010 
Customer No.: 23696 



11 



U.S. Ser. No. 10/752,420 



PATENT 



37. (Currently Amended) The apparatus of claim 36, further comprising: 

means for creating a new private key using a previous private key and the system 
parameter. 

38. (Currently Amended) The apparatus of claim 36, further comprising: 

means for creating a counter value indicating the generation of public and private keys; 

and 

means for outputting the counter value when outputting the public key. 

39. (Currently Amended) The apparatus of claim 38, further comprising: 

means for creating a new private key using a previous private key and the system 
parameter based on the counter value. 

40. (Currently Amended) Apparatus An apparatus for verification in a public cryptographic 
system comprising: 

means for receiving a public key from a mobile user device ; 

means for receiving a system parameter from a mobile user device, the system parameter 

associated with the public key; 

means for authenticating the mobile user device using the public key; and 

means for generating a new public key and authenticating the mobile user device using 

the new public key, if a previous public key fails, the new public key being derived from the 

previous public key and the system parameter. 

41. (Currently Amended) The apparatus of claim 40, wherein generating the new public key 
comprises: 

means for using a number of powers of the previous public key for authentication of the 
mobile user device ; and 

means for accepting one that works as the new public key. 
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42. (Currently Amended) The apparatus of claim 40, further comprising 

means for receiving a counter value from the mobile user device, the counter value 
indicating the generation of private and public keys; and 

means for generating the new public key using the previous public key and the system 
parameter based on the counter value. 

43. (Currently Amended) A machine-readable medium comprising instructions operational in 
a mobile user device for performing a public cryptography, which when executed by a processor 
causes the processor to: An article of manufacture comprising a computer system having a public 
cryptographic system, said article of manufacture comprising a machine readable medium 
having machine readable code means embodied in said medium comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to create a private key and corresponding public key with associated system 
parameter; 

machin e r e adabl e cod e means embodied in said machine readable medium for causing 
the computer to output the system parameter when outputting the public key; and 

machin e r e adabl e cod e m e ans e mbodied in said machine readabl e medium for causing 
the computer to use the private key for authentication. 

44. (Currently Amended) The machine-readable medium of claim 43 further comprising 
instructions to: The article of manufacture claim 13, further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to create a new private key using a previous private key and the system parameter. 

45. (Currently Amended) The machine-readable medium of claim 43 further comprising 
instructions to: The article of manufacture of claim 4 3, further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to create a counter value indicating the generation of public and private keys; and 

machine readable code means embodied in said machine readable medium for causing 
the computer to output the counter value when outputting the public key. 
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46. (Currently Amended) The machine-readable medium of claim 45 further comprising 
instructions to: The article of manufacture of claim 15, further comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to create a new private key using a previous private key and the system parameter 
based on the counter value, if the previous private key is not active. 

47. (Currently Amended) A machine-readable medium comprising instructions for 
performing a public cryptography, which when executed by a processor causes the processor to: 
An article of manufacture comprising a computer system having a public cryptographic system, 
said article of manufacture comprising a machine readable medium having machine readable 
code means embodied in said medium comprising: 

machine readable code means embodied in said machine readable medium for causing 
the computer to receive a public key from a mobile user device ; 

machin e r e adabl e cod e means embodied in said machine readable m e dium for causing 
the computer to receive a system parameter from the mobile user device, the system parameter 
associated with the public key; 

machine readable code means embodied in said machine readable medium for causing 
the computer to authenticate the mobile user device using the public key; 

machine readable code means embodied in said machine readable medium for causing 
the computer to generate a new public key and authenticating authenticate the mobile user device 
using the new public key, if a previous public key fails, the new public key being derived from 
the previous public key and the system parameter. 

48. (Currently Amended) The machine-readable medium of claim 47 further comprising 
instructions to: The article of manufacture of claim 4 7, wherein the set of code segments for 
generating the new public key comprises: 

machine readable code means embodied in said machine readable medium for causing 
the computer to use a number of powers of the previous public key for authentication of the 
mobile user device ; and 



Attorney Docket No.: 030010 
Customer No.: 23696 



14 



U.S. Ser. No. 10/752,420 



PATENT 



machine readable code means embodied in said machine readable medium for causing 
the computer to accept one that works as the new public key for the mobile user device . 

49. (Currently Amended) The machine-readable medium of claim 47 further comprising 
instructions to: The article of manufacture of claim 17, further comprising 

machine readable code means embodied in said machine readable medium for causing 
the computer to receive a counter value indicating the generation of private and public keys from 
a mobile user device ; and 

machine readable code means embodied in said machine readable medium for causing 

the computer to generate the new public key using the previous public key and the system 
parameter based on the counter value. 



50. (Currently Amended) Apparatus A mobile user device used for authentication 
comprising: 

a processor configured to generate a first private key and corresponding first public key, 
the processor configured to generate a second private key associated with the first private key 
and to create a second public key corresponding to the second private key; 

a storage medium coupled to the processor, configured to store the first private key; and 
a transmitter coupled to the processor, configure to output the second private key once 
such that it can be re-created and output the second public key when outputting the first public 
key; 

wherein the processor uses the first private key for authentication. 

5 1 . (Currently Amended) Apparatus used for verification comprising: 

a receiver configured to receive a first public key from a mobile user device and to 
receive a second public key from the mobile user device, the second public key associated with 
the first public key; 

a storage medium coupled to the receiver, configured to store the first and second public 
keys; and 
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a processor coupled to the receiver, the processor configured to use the first public key 
for authentication of the mobile user device , the processor configured to use the second public 
key for authentication of the mobile user device if the first public key fails. 
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